The third and most powerful is to overide the BitPermUser class with a custom class and do your work. This will mean your gBitUser is an object of a class by your own making. See Custom Authentication Tutorial.